Group support for MFA

[Lewis9595]

Hello Veeam R&D Team,

I am requesting support for integrating groups with Multi-Factor Authentication (MFA) in Veeam Backup & Replication (B&R). Currently, Veeam B&R does not support assigning groups with enforced MFA for authentication, which limits our ability to manage access securely and efficiently in environments leveraging group-based access controls and MFA policies.

Background and Use Case:

We manage authentication using Microsoft Entra ID, where group-based access and MFA are standard for compliance and security.

Veeam B&R’s current limitation means we must assign permissions at the individual user level, which is less scalable and increases administrative overhead.

Enabling group-based authentication with MFA would align Veeam B&R with modern identity management best practices and help us maintain a secure, auditable environment.

Current Challenge:

Veeam Support has confirmed that group assignment with enforced MFA is not currently supported and recommended submitting a feature request here.

This limitation affects our ability to streamline user management and enforce consistent security policies across our backup infrastructure.

Request:

Please add support for authenticating groups with MFA enabled in Veeam B&R, ideally with compatibility for Microsoft Entra ID group assignments.

This feature would greatly enhance security, simplify access management, and align Veeam B&R with enterprise authentication standards.

Thanks

[Mildur]

Hi Lewis

hank you for your request.

Enabling MFA for Security Groups is on our roadmap, but we don’t have an ETA yet.

ideally with compatibility for Microsoft Entra ID group assignments.

With v13, we will introduce SAML support for Veeam Backup & Replication. If everything goes as planned, you should be able to use SAML authentication with Microsoft Entra ID.

This might already address your MFA requirements for user accounts, since authentication will take place on the Entra ID side — where you can enforce MFA — rather than within Veeam Backup & Replication itself. So you may not need to wait for our group MFA integration.

Best,
Fabian